Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13213.roa
File: AS13213.roa (raw, json)
Hash identifier: btrfsNOVzI5QYjiFO3nKsZiU2CPGN+nSzcmRasLvu+8=
Subject key identifier: B9:22:76:78:52:3E:D5:42:01:7E:8E:1C:8C:B5:C3:B8:99:09:16:36
Certificate issuer: /CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Certificate serial: 7E65D9D73B8C141144AD50BB22DD696C25873CF6
Authority key identifier: 21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13213.roa
Signing time: Fri 08 May 2026 11:56:53 +0000
ROA not before: Fri 08 May 2026 11:51:53 +0000
ROA not after: Fri 07 May 2027 11:56:53 +0000
asID: 13213
IP address blocks: 2a13:9500:3::/48 maxlen: 48
2a13:9500:24::/48 maxlen: 48
2a13:9500:25::/48 maxlen: 48
2a13:9500:26::/48 maxlen: 48
2a13:9500:27::/48 maxlen: 48
2a13:9500:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.mft
rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:65:d9:d7:3b:8c:14:11:44:ad:50:bb:22:dd:69:6c:25:87:3c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=218cc6e24105de6c5c9003d65243893cb3cfdd01
Validity
Not Before: May 8 11:51:53 2026 GMT
Not After : May 7 11:56:53 2027 GMT
Subject: CN=B9227678523ED542017E8E1C8CB5C3B899091636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:c5:5e:6c:7c:fe:17:91:18:5f:64:51:c9:
3b:84:f0:77:82:f5:8c:a4:94:f7:55:5f:fd:e2:c5:
34:82:a6:74:6f:58:17:1f:20:39:89:62:27:5f:04:
1c:73:97:e9:2f:67:06:98:93:52:cc:57:45:e3:53:
63:2f:5b:11:b7:c5:3c:7f:79:57:1b:45:9d:78:3a:
c3:0a:f6:62:5c:c5:17:c8:92:26:38:7e:ce:6b:17:
58:b0:b9:f9:a3:f7:99:9d:70:9b:bd:99:e4:c7:7d:
17:e6:1b:cd:61:b9:e9:5b:61:a2:22:db:de:fa:e6:
41:06:af:00:c1:04:10:d5:f2:20:75:b0:2f:92:46:
2f:db:7d:68:05:54:ef:77:8a:4b:ed:4b:e8:8c:c3:
93:72:40:af:bb:e0:ad:a5:95:b2:2a:6e:77:3e:64:
82:2e:e5:ec:5d:a4:08:2e:9b:0b:6d:f2:56:a0:8c:
85:a1:08:59:70:13:25:10:72:25:cc:c2:19:da:a3:
49:24:93:a4:e0:6f:ec:5f:6a:a2:0c:fb:50:84:bb:
b7:80:8c:13:79:04:99:e9:0e:36:20:4b:cd:42:3c:
d4:11:f8:b4:19:00:13:7f:04:c0:c3:3e:6a:d8:83:
2e:27:29:fc:da:24:8f:31:92:3f:3b:0f:30:57:8d:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:76:78:52:3E:D5:42:01:7E:8E:1C:8C:B5:C3:B8:99:09:16:36
X509v3 Authority Key Identifier:
keyid:21:8C:C6:E2:41:05:DE:6C:5C:90:03:D6:52:43:89:3C:B3:CF:DD:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/218CC6E24105DE6C5C9003D65243893CB3CFDD01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYzG4kEF3mxckAPWUkOJPLPP3QE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/718a1b4f-b64c-402c-be15-dd82a41a1af6/0/AS13213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9500:3::/48
2a13:9500:24::-2a13:9500:28:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:a9:8e:4f:cd:6c:b1:07:2e:30:89:36:b3:b0:8e:1a:e2:6b:
6e:92:97:dc:31:e2:9b:e4:e5:5b:da:e3:26:2d:2e:75:7a:f9:
f6:5b:e2:c3:ec:55:4d:58:11:a4:3f:ca:21:48:cc:2e:61:7b:
35:31:50:b0:4b:89:d0:a9:84:19:e3:03:8c:8b:b7:9c:ec:41:
37:4c:9f:f6:b2:6c:a6:c2:a9:cc:30:cb:61:78:5b:d2:07:c0:
26:63:f4:7a:ba:37:dd:09:5d:74:bb:e9:7a:d4:77:1f:ae:48:
53:8e:75:28:6b:f3:a6:23:11:39:7d:8e:df:4b:4f:e0:63:ae:
f2:0d:bb:40:bc:62:67:19:cd:41:f7:56:3b:1b:4a:d2:89:b0:
a2:d0:2c:ed:87:af:a1:3f:ca:b2:8e:34:55:08:c8:33:10:d4:
12:95:70:ed:d4:ad:f5:15:cf:33:f3:ea:34:7a:80:7c:b9:3c:
65:e8:84:f0:a2:b3:35:fb:63:22:43:f4:73:52:b1:f2:c2:87:
7a:64:6e:65:94:cb:8e:12:13:57:0a:57:93:e7:73:8c:24:76:
2d:92:c7:63:9b:2d:e8:aa:80:6e:75:64:89:b5:26:2e:49:97:
50:1e:d7:f3:f4:2e:d8:0c:ef:d9:f2:62:0b:30:eb:f2:c5:b4:
9f:81:da:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUfmXZ1zuMFBFErVC7It1pbCWHPPYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE4Y2M2ZTI0MTA1ZGU2YzVjOTAwM2Q2NTI0Mzg5M2Ni
M2NmZGQwMTAeFw0yNjA1MDgxMTUxNTNaFw0yNzA1MDcxMTU2NTNaMDMxMTAvBgNV
BAMTKEI5MjI3Njc4NTIzRUQ1NDIwMTdFOEUxQzhDQjVDM0I4OTkwOTE2MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHksVebHz+F5EYX2RRyTuE8HeC
9YyklPdVX/3ixTSCpnRvWBcfIDmJYidfBBxzl+kvZwaYk1LMV0XjU2MvWxG3xTx/
eVcbRZ14OsMK9mJcxRfIkiY4fs5rF1iwufmj95mdcJu9meTHfRfmG81huelbYaIi
29765kEGrwDBBBDV8iB1sC+SRi/bfWgFVO93ikvtS+iMw5NyQK+74K2llbIqbnc+
ZIIu5exdpAgumwtt8lagjIWhCFlwEyUQciXMwhnao0kkk6Tgb+xfaqIM+1CEu7eA
jBN5BJnpDjYgS81CPNQR+LQZABN/BMDDPmrYgy4nKfzaJI8xkj87DzBXjXllAgMB
AAGjggIgMIICHDAdBgNVHQ4EFgQUuSJ2eFI+1UIBfo4cjLXDuJkJFjYwHwYDVR0j
BBgwFoAUIYzG4kEF3mxckAPWUkOJPLPP3QEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzE4YTFiNGYtYjY0Yy00MDJjLWJlMTUtZGQ4MmE0MWEx
YWY2LzAvMjE4Q0M2RTI0MTA1REU2QzVDOTAwM0Q2NTI0Mzg5M0NCM0NGREQwMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0lZekc0a0VGM214Y2tBUFdVa09KUExQ
UDNRRS5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzcxOGExYjRmLWI2NGMt
NDAyYy1iZTE1LWRkODJhNDFhMWFmNi8wL0FTMTMyMTMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMCMEAgACMB0DBwAqE5UA
AAMwEgMHAioTlQAAJAMHACoTlQAAKDANBgkqhkiG9w0BAQsFAAOCAQEAhqmOT81s
sQcuMIk2s7COGuJrbpKX3DHim+TlW9rjJi0udXr59lviw+xVTVgRpD/KIUjMLmF7
NTFQsEuJ0KmEGeMDjIu3nOxBN0yf9rJspsKpzDDLYXhb0gfAJmP0ero33QlddLvp
etR3H65IU451KGvzpiMROX2O30tP4GOu8g27QLxiZxnNQfdWOxtK0omwotAs7Yev
oT/Kso40VQjIMxDUEpVw7dSt9RXPM/PqNHqAfLk8ZeiE8KKzNftjIkP0c1Kx8sKH
emRuZZTLjhITVwpXk+dzjCR2LZLHY5st6KqAbnVkibUmLkmXUB7X8/Qu2Azv2fJi
CzDr8sW0n4HaGg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:04:55 2026 by rpki-client